Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I currently have a dedicated server with a domain name eg. which has its own dedicated IP address. I need to secure only one sub domain eg.

Does this subdomain need its own dedicated IP address to get an SSL certificate? Also, am I correct in thinking that I only need a standard certificate not a wildcard?

share|improve this question
up vote 10 down vote accepted

If you only have one SSL subdomain, then you only need one IP address and you don't need a wildcard. You can run SSL for on the same IP address as non-SSL for

If you have more than one SSL domain, there are four ways to handle it:

  1. Multiple IP addresses
  2. Wildcard SSL certificate
  3. Server Name Indication
  4. Subject Alternative Name

They all have their own advantages and drawbacks, and you'd have to research them all to work out what's best for your application.

share|improve this answer

The certificate is associated with the name, not the IP address, so no, you don't need a dedicated IP address for your secure site.

If you only plan to have one secure site, a non-wildcard certificate should be sufficient.

share|improve this answer
This is not fully correct Dominic. According to this:… - in Apache an SSL cert is usually tied to an IP address because the SSL handshake happens before the browser has even specified which domain it is requesting. There may be some technical methods to get around this, however. – Simon East Sep 28 '12 at 1:08
If you only have one secure site, that won't be necessary. – Dominic Cronin Oct 2 '12 at 14:08

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.